device_google_zuma/tracking_denials/dumpstate.te
Ernie Hsu bb7586ac03 mediacodec_samsung: add sepolicy for mfc codec
Add necessary sepolicy. Log and reason are added in review comment
move sysfs out from legacy setting

Bug: 262633502
Bug: 263049105
Bug: 262794577
Bug: 262794578
Bug: 262794634
Test: video playback
      SELinuxTest#scanBugreport
      SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: I240f3fc4672a0d3133699f76a808573e172d23f2
2022-12-22 03:46:04 +00:00

25 lines
1.2 KiB
Text

# b/261933169
dontaudit dumpstate con_monitor_app:process { signal };
dontaudit dumpstate default_android_service:service_manager { find };
dontaudit dumpstate euiccpixel_app:process { signal };
dontaudit dumpstate fuse:dir { search };
dontaudit dumpstate hal_audio_default:binder { call };
dontaudit dumpstate hal_confirmationui_default:binder { call };
dontaudit dumpstate hal_health_default:binder { call };
dontaudit dumpstate modem_efs_file:dir { getattr };
dontaudit dumpstate modem_img_file:dir { getattr };
dontaudit dumpstate modem_img_file:filesystem { getattr };
dontaudit dumpstate modem_userdata_file:dir { getattr };
dontaudit dumpstate persist_file:dir { getattr };
dontaudit dumpstate sysfs_scsi_devices_0000:file { getattr };
dontaudit dumpstate sysfs_scsi_devices_0000:file { open };
dontaudit dumpstate sysfs_scsi_devices_0000:file { read };
dontaudit dumpstate system_data_file:dir { open };
dontaudit dumpstate system_data_file:dir { read };
dontaudit dumpstate vold:binder { call };
# b/262633248
dontaudit dumpstate mediacodec_google:process { signal };
dontaudit dumpstate rild:binder { call };
# b/263048776
dontaudit dumpstate hal_usb_impl:binder { call };
dontaudit dumpstate hal_uwb_default:binder { call };